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(54) ILLEGAL ACCESS PREVENTION METHOD AND SYSTEM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To exclude an illegal 
packet by means of filtering utilizing an existing area of a 
packet without adding an area to a packet data form. 
SOLUTION: An IP header check section 1 1 of a gateway 
1 passes only a legal communication packet based on 
TT (Time To Live: in-network duration time) information 
and IP address information included in an IP header. A 
TTL filtering section 21 of the IP header check section 1 1 
passes only a communication packet having valid TTL 
information in the IP header. A validity check section 21a 
checks the validity under the condition that the value of 
the TTL at packet passing is within a range from a 

« 

predetermined initial value in a group in advance to a 
(initial value-maximum passing gateway number). The 

filtering processing section 21b gives a communication packet whose TTL information does 
not satisfy a prescribed condition to a packet abort processing section 12. 
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(54) KWO«»3 ^iET^^XWlh^Sfe^tf^XxA 
(57) [£*>] 

[HUB] boir-p&^c^V T<DmM%tro 

lilt I P^y^tMTTL (Time To Live : 
$2 112, I p^y^*lc»att©*>*TTLflMB*r# 

£^^^6. 7^!l^ftl»2 1bttTTL 
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[!i*S3] IP W^^y^F 3 ^) r ^ 
[|£3ftJS4] MAC (^x-fTT^-fe^ftJW) TKl^ 



M»**8] »IB*y h!7 IP (-Y 
y^Srfr 5 I PTF^7>f;^ 9 

[s»*«9] awe** M7-^»**a», mac 

y # £rfx 5 MA C T KU^^A-* y v^¥g:Sr* fe^ 
£tf r b %W$kt~t ^It*^ 6 7!?^ 8 5 *?<z>v^T 
1 JgicEtt^iET ^ ^ Kit r A 0 

7b3§ 9 co 5 ^<OV^tl^ 1 ^Eftco^FIEr ^-fe^S6± 
[0 0 0 1] 

t ITTCP/ I P (Transmission Control Protocol 
/ Internet Protocol : (ESIWW^^ ha^^^ 

[0 0 0 2] 

N (Local Area Network : ^7/^ 8 y h V — 

t> v lt lan *$&w * 

V^T, Hf^n LtTCP/I PMU^ 

[0 0 0 3] tzzx, mmmfcmm&tix^z*? v 
y-?±x\ &mcfc^xmmmzy*-7ftft*ft<> 
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[0 0 0 4] r<z>±5*#&fctt, i«LANSrS«"r 

AC (Media Access Control : -f TT^ir^ftfJW 
T KW^fcte: I P (Internet Protocol : 4 
y^nM/H TK^SrlSJU fc©^-/^ 
^y h&»»£*ftv\k5fcUC, Afl? 

[0 0 0 5] n<£><£ 5^ /^yh©MAC7K^* 

y-f/v* U y^SrfrJMACT K^7>f/^ y 
m&tcftl PT K^l:t9 7-f^ y ^Srff 5 I P 

[0 0 0 6] Tfttt. MACTK^SfcttlPTK 

So : fMiii^fl : ^*r^MACTF^*fcttI P7 K 

ACT FUX&tctZl PT K^*£*«£*VO^MA 
ACT K^*fcttl PTK^^y bcD^^riiii 

[0 0 0 7] MAC7 #<(D»^«*«« 

PT F^t7^/^ y >-^TS I PT K^^-f/W 
[0 0 0 8] IPTK^fl TCP/ 

So "t<Dfztb, ^ju-^om^K SR^/rt^ 
I PT K^Sr^IE^KSLr^v-^rtOL A 

[0 0 0 9] ZtllCttLX, #«?7- 1 7 0 2 7 9f 
&*Mf*, I PT Y\sX7 4fr9 y ^^Sr^V^Sr. tft 

[0 0 10] ■rafrfc, #»¥7-1 7 0 2 7 9fM 

y y^tff 5**^>*I*l AN»§t^«o^y y 



•ft hiS«l»K:*^A— Mc# 

t»***ifc^/v— -fttb&^trv Y^mzm&ir 

[0 0 11] ro^y y^HKfcJDUSLfcLAN-tft^e 
tii^;w^Sfl:g£l, H-^/V-^^LAN^ 
^^cfiSft/^^^SIfSi-S^^s/ M-, «E^i — ^ 
#*£ft*H"5o b*rS:«i"*t# 

fe5MAC7 K^Ci57^/^ y VftcfibWZ-, 

[0012] -Tftfrh, H*<o*B***KSix*«*«) 

j^f S^*TiUc&^T\ 1> r/^iai&fc**fc 

JR« $ *ifc»co£$8 LAN L 

bR-^^^JIlLAN^Mt5/^y h 

\zn, :/y ys^Euswu K«7ic*«i-*iilLAN©^ 

^U^y hSrgftLfcfctfctt, ^y y^HKtt, 
g« Lfc/^ s> h fcf+ft! $ fix v > S ^>ft^-^#*«r«8U 

r©S«tfc/^y Hc»LtMAC7 Kl/ 

*?>f y v^tB*»f^$*^9 yvmmmmL 

^S^LANKL^rTSo 

[0013] r©J;5fc't"£-fc£<fc9, lancma 

[0 0 14] 

?7-i 7 o 2 7 g^i^^tifc^f^ft ^y 

*SrR«U n-^/W-^rt^LANlBCaWPICtt*** 
KdS7c*fro-CV^7-<>^^ y y^«trfc5MAC7 

[0 0 15] :©#i¥7-l 7 0 2 7 9f^«©^ 
(Cj: LAU^MACJiK:*5»taBI«^y h> 
^<D**^xi«LJ:5 birZ>s<sry b^o^iET^ir^ 

y h SrBLlM- 5 w t d5t?t So 
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[0 0 16] ba>Ufc#e>, ffl¥7- 1 7 0 2 7 9f 

[0 0 17] LANtfV^y HCft, ftfJIJg 

^ftTV^LAN^TAiC^Tft, #<£>*n\ 
SrillDLTIfcft-t-S^t^t'f, »i¥7-1702 

[0 0 18] roSSWft* ±^Lfc*ttf^M^r«$ix 

[0 0 19] 

^*5tts«MS**fcL-"C. 0f3tli^3S»r*5fr, Atrial 

* rtlWdWfDBflMR^Rattfrf'* y $ - 1 J: 9 , 
[0 0 2 0] *MB* y b rt#»*KHlHSHu flWB 

ft, hv-^mm^m^x^m^ti^mBW^m 

[0 0 2 1] iflB^FIEr^^^Kih^ft, S&fc* I 

[0 0 2 2] ifflS^FiET^ir^Kih^ft, S fefc* M 
ACT Fi/^«^<7^;^ y fcfcflMH-* 



[0 0 2 3] WE^IET^^^Klfc^feft, (WB^iE^ 

mmm&mmmmtz>£ofci>x%£\<\ 

[0 0 2 4] Z<D&m<OB2<D&&\Z&Z*lET#±X 

Kih^xAft, «»<£>3&R*y b7-^#^£*bfc 
5SHS*s> M7— ^s/^-Mcm^r, tfrfB3£*M^ b 
fry bfc^SftS** M7-^rt#a«rlB1»«<o«JSMt 

[0025] una** H7-^rt*Ki*nn»«tt, ire 
b^-^fli^x^^r^Sixswia*^ by- 

* »&¥&<a*:fc«ifi«4rfi £ S «t J-R^1" £ ^ 
-WIE»^^»©ttffl^^*8»^^SI«^y b£ 

[oo2 6] swa^s/ H7-^tt^#aft, iptku 
[0027] gria^y vv-tm^mxt. mactf 

[0 0 2 8]»B^H7-^*8f±, 

y?K£<>xmmmik£tittjEs<tr*y Y*tmtz> 

[0 0 2 9] r<D*MO^jET^'fe^lBJl:**fc*5J:^> 

y?&m&tstix^%mm*y hy-?<Dmmmy^-7 
&mmrmm<D&%&%if~*y?i'%ctK£V), mm 
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[0 0 3 0] 

[oo3i] ^<D^m<omM<DMM\cm^^r^±^ 

t*ti^ TCP/I h^/Wi P^^^^i^ 

xy7t*5TTL *$mt%> z t \c x *> ? v 

So 

[0 0 3 2] TCP/I P^p h^/MCjcSMff/^y 
KOIP^y^fc TTL (Timeto Live : * y M7 

-*rt#*w*w) ««ft»ifrr8fc»«>TTL3ipr* 
s»i«ii*aiai-s*^, «i» 

h<Dh\sXgm&ft%o r<D±5*TTLl#«te, ^3 

»fe-r«wfc*BJfci"8fc»K:Rtt6ft"CV^So TCP 
/I P7"n b^/HC&^Tft TT LcDg^lfiSl * 2 5 

5 ego ■ -c&So — jRicwt. as««*d^e>sflws** 
[0033] nateft^-^rtt?, T 

TTL^«amtr**<R*U"C*<. 
©H*TTLO«JJBIt^fe (3Mft-ft*«I/f^SS 
HPfjE^^y hfcWWf So 

[0 0 3 4] £<0J:5fttt»#fc«fc^ ^/w-:/ft£>S 



IE^ y h «r#Bfrt S r t *-C* So 
[0 0 3 5] 01-03 Sr#fi8 UT> _b» LfcfUIiC* 

Ayfc^y M7-^^^AO*Jfi^«SrRWi-So 
[0 0 3 6]llft rcD^<D^ftO^S|{C#S^]E 

[0 0 3 7] Bllfc^l"^*- ltt, I P^?^ 

f-ay^fBl lSsitf^y 2SrA<tL 
rv^s 0 

[0 0 3 8] IP^^iy^«lltt, IP^^y 
<0tiHR*^ai5^U IP^y^4*tl5TTL (Ti 
me to Live : *</ h !7-^ rt#jHE«fM) flT**5,fctM P 

^br, ^E^ftV^SMt'^y hti>&frilii3-€\ ^jE 
/^jry hOilig&fflJJrfSo bftH&aSRl 2 

12, I P^!y^fx5/^S1 IK&f), m&»Wk$ii 
tt^lE^y h£«£3*f So 
[0 0 3 9] IP^^f*y^»HS, TTL7^ 

2 2 Sr#*rSo 

[0 0 4 0] TTL7^;^yy^S2 1fl SStt^- 

U I P^^^^^TTL'lf«cOg^tt^^^^^ b 
T\ TTLflM*i:Lr*3tto*aTTLflMI«r#r5 

£lrf Silff/^y hoaii^Plii:t"So 
[0 0 4 1] SSttfxy^»2 1 aft, Ii/^7b 

*«UBLTV^*^^a£<5v>-r, TTLfflffR^SStt 

[0042] ±3*LfcJ;5tey- h!>^^ IKiSttST 
^V^r, f J6^7 P ft t©T T L©WI«f 

3o<Z.ktc£V > *att?-*y^»2 1 att, h 
JW|l*©TTL©ll[*TTL©tD«Hi^b 



-5- 



[0 0 4 3] iP/K^7^;^yy^2 2H I 

P^y^JdSttS I PT KW^flMHC*<5V^r, Mi 816 
S*. *JxK^© I PT Kw^"»*Sr*"i"5ii«^^y 

S i <£> r fc J: a 7 4 y y ymM%^Z> tf- 

[0 0 4 5] B2fc*t*yh^5/^tt, mi 

3, fg2<D«;*c4 s fg3<7>S3c5, Il^lLAN 
6, !2(7)J)|LAN7joJ;t;^3(Oj«LAN8lrI 
*/C^5 0 ii«*3^j:t;i2«*4}t 81© 
»LAN6fc*S£SftT:J3?K *3<0**5tt*3<0 
3»LAN8fctt*3ft"tV^ 0 Il(7)JlLAN6i 
»2 0ifcLAN7fctt*2 0>y- 2^J:*9tt 
^Stir*3!?, !2^iLAN7tf 3(DSiLAN 
8 t»»2«)^- h 1 KJ: 0«^£*vt^So 
[0 0 4 6] #l*UUW2©^-b**'f l*5j;tf2 
ft, WM2(DjlLAN7il3^iLAN8 
fcG>|«, ^t/H^lLAN6il2^»LAN 

[0047] mi<D#-bv=<{ in, Hitsbfcr. 

[0 0 4 8] 9$2<D?—hV=.Jft. &M<Dtf~bV* 
4XhV, I PT Ku^Srfflv^iiff^y h©7>f;v 

[0 0 4 9] ^2«*4^i:^3«*5«-^ 
[0 0 5 0] £<£>#3\ «*4i:«*5tti 

-h^x^lioj;t;2^#4t5t* "2" tfe§o r 
[0 0 5 1] ^-^©*B*3I±, S*4«*5t 



»B*3-CWt, TTL0>*0ffl««r "3 2" £f££L 

fc£££>»fK ^J:0a*4«lLAN6l:8iU 
^i^fl«3«4^ior, «*4<z)ipr 

Kv^KKSLT, C*5{c^FjE(cr^-fe^LJ:5^L 
ttifrSr<DlbftK<>^X , H3^-f^n-^^-b^# 
i3C/Tf7n^-hfl BIO 

p^5/^^rcy^M<D^^r^LTV^^o 
[0 0 5 2] Sf—b$x-4 2{Ctel VTYl'^tny JJV 

SftU IoTTLCJ;S7^;H y yy<DtzMc y W 

^4 fc^5i©IB^*0ft»fcTTLO«lJBHio 

"5" fc**3iiiy-H?3:-f«: "2" fc*rt»<o»a 

[0 0 5 3] £1\ ffi*4^|^-^/V-7 P rtfiOS*5{C 

[0 0 5 4] «*4tt, I PT Kl/^, o£<93§ 

fi5cIPTKi^ i:S*4^IPTK^^£U 
«#©IPrK^ o*0»* G£«jfe) IPTKW 
* icffi¥5fc«&* 5<DIPTK^ SrRfti- 5 4: i t> fc, 
TT LiC«Stt^/l^^lBT?»9 *«>fcl3J»«[a " 5" 
SriryM/T\ y h L A N 6 ^2Hti" 

[0 0 5 5] SlWSftfc'^y Mi, h»>»>f2t* 

■i-§ 0 y-n?*-f2tt, MTciprK^ms 

2fi, 7nOTTL«T?fcS "5" ^6 "1" SrW^ 
Lfc "4" &Sffc&TTL<ti: ITTTLCty h L 
T\ mm^y h*r5EI»LAN7tea6flH*So 
[0 0 5 6] S«LAN7|cMJil^y M±, S 

IP^fxjx^HllfcfeV^ i3^t7D- 

[0 0 5 7] I P^y^co^a:y^d5H*6$ix5i:, I 

hfclHtrs Ur^S17) 0 ^y:/ 
s i ir% ^-^a >-^ie^t*&o/cJ»#^ i p a ^ 

[0 0 5 8] ^f^Sl 2-ejE*-c*)ofc»^tc:^ 

TTLCD^S "0" ~ehZ> ti^fr(D^ x.y?&ff0 (* 
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^ "0" "C*>5»^fcte* TTLWW^ h7~^ 

yYigmtZ* -^i-lt TTKOftt, "4" 
-C&StfrC, XTtr^S 1 S^ttE***!*;*^ TT 

4) 0 

[0 0 5 9] SStt^fxy^lt TTL(0*aS*flMI 

[0 0 6 0] r<0»£\ «JJH«af4 "5" , «0JB«- 
ft^-h*) 0tt "3" (=5-2) TffclK S:lfb 

KUtiZo Xfy/SHfjESiW^^ IP 

[oo6i] ^m^mm^y h^mtit iptf> 

I PT K^fi*«Stt-CV^5«*5 0T K^T?*5 
jE»^^y hfc^ftU H 

lfc*«SftS O^S^S 1 6) o tf-hV* 

1ft, SflTbfc^y FOTTLC "4" d>6 "1" 

[0 0 6 2] »*4 36SSj»LAN6mS«$*tr 

^ftv^«rc\ Stt^-^«*3 «*4 4rKo 

[0 0 6 3]i*3tt, «flr56IPTK^^«*4 0 
I pr Ki"*feR*U ^ I Ki"*fcft#fc«* 
5<D1 PTK^^Stt, SHIPS' h4ri«LA 

^/W-^rt^K 9 ft£>fc T T L <0%}MU&t>fr b ft V\ 
«*3«t, ISftitttt "3 2" £TTL 

[0 0 6 4] aMtstifcafli^y H^-h*^ 2 

{fx; I PT K^^3WRStbTV^«*4<DT 

*>*K J6ft I P7K^*#*»SftTl^5»*5<0r K 

i^TJfcSfc*, I PT K^ttjE*"C*>Si*fti-« 

y~h#*-f 2^, "3 2" "1" «rw 

-f^Lfc "3 1" SrTTLfc-feiy MT, ^Mt^^ry 
h^HLAN7iC^-r^o 



[0 0 6 5] ^«LAN7|C«ff £ftfc/«**s> M*y~ 
h**^l"T««S;ftSp y-hfr^ltt, IP^ 
liCfcV^ ll3tC^1-^n-^^-f 

l«ot I P^^o^s/^Srff 5o 

[0 0 6 6] IP^y/0fx^^^ife^6^ * 

1 lti pco/^— yofx^^ &rtTV\ ^ 

sty*, hmmi&Mm 2^5/ h^mrr 

[0 0 6 7] ^r^/S12t% I P^ymoW 

Lcoffi^ "0" t?fc$^^^^y^SrfT5o ^ry 

1 3CD^s^K*3lvT\ feb^TTLCOH^ 

"0" -CfciLtf^y bSr«BHi-»J», ^Cit T 
TLW "3 1" ~ehZ>tc$>. Xy-y-fS 1 3Ti3:IE 

[0 0 6 8] **ry?§ 1 4<^Mm<^^:y^*^ 

^ei^^fci 5ic«Hfia« "5" -c*9, (toffl 

«[-**iSiiy-b9^-f») T?*>6 0tt "3" (=5 
-2) T?*>*^, gWLfcilff^? h<OTTL(Dm\t 

"3 1" -CfcSfcfe, Jl*t*ft*n, ^T^S 1 7 
l^Ttt, Rilfi^y hfcM8*£*t5o 

[0 0 6 9] ±3tLfcJ:5^ IP^yWttltS 

[0 0 7 0] ft*3, Hl-H3-eKWLfcro»W<D* 
yjflz^ lP7K^ia§7>f;v^y^fffflt5 

[0 0 7 1] 
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So 

[0072] ~rtzt>h, ^(DmmKxnif, y<d 
y r trfdffl ufc^jE^*- y h coy ^ y 

[nil r. <Dmm<Dmk<DWMKm £ ^fiet z±xvs± 

[H2] m^-hfr^fcffl^fc** h!7-^>>* 



[0 3] 01<D^T-A(D»#^Kr5fc^ 

[«F*©IWIl 

1, 2 Jf-YV*4 
3-5 

6 — 8 JSLAN (Local Area Network) 

11 IP (Internet Protocol) ^yp^zcyl? 
% 

12 /^yh*ai«anB 

2 1 TTL (Time to Live) V 4 V 

2 1 a JfSltfi^* 

21b 7^/^ y y^*m<B 

2 2 I PTK^7^W y V^ffl 
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